Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
File: h0tZG12PB26vRy4-pF07XI4TUKE.mft (raw, json)
Hash identifier: AIzu3+IZVd6ot17dax06vYEUQGK9rw0miQ1i+0YO9Wc=
Subject key identifier: 47:C0:EA:51:33:5A:2D:0F:70:55:D6:A0:2D:63:EE:6B:60:2C:4A:28
Authority key identifier: 87:4B:59:1B:5D:8F:07:6E:AF:47:2E:3E:A4:5D:3B:5C:8E:13:50:A1
Certificate issuer: /CN=874b591b5d8f076eaf472e3ea45d3b5c8e1350a1
Certificate serial: 019E9A042B624608DDE9591092AB5BB1629F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
Manifest number: 194A
Signing time: Fri 05 Jun 2026 23:00:24 +0000
Manifest this update: Fri 05 Jun 2026 23:00:24 +0000
Manifest next update: Sat 06 Jun 2026 23:00:24 +0000
Files and hashes: 1: JqglYn9oExlpuQ-Y68kS4ik8jRI.roa (hash: lo9W0LCZNdcrhkqYexTlEJ9bxvUJuTPrwpGw86jlaFk=)
2: h0tZG12PB26vRy4-pF07XI4TUKE.crl (hash: vpbJvVXC81w+jEBTY+ZY2aZnSypxo63G0b9lAHhlhFo=)
3: vAlQFpaLpXoMpWo27m8dZRrzZKc.roa (hash: V3cMkhkIFwXZN0a+IEYOXNX5PaTP19/XRl5SDnAT0cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9a:04:2b:62:46:08:dd:e9:59:10:92:ab:5b:b1:62:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874b591b5d8f076eaf472e3ea45d3b5c8e1350a1
Validity
Not Before: Jun 5 23:00:24 2026 GMT
Not After : Jun 6 23:00:24 2026 GMT
Subject: CN=47c0ea51335a2d0f7055d6a02d63ee6b602c4a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:72:b2:48:da:92:2a:b2:37:d9:f8:84:cc:24:
24:8f:1a:f2:6a:67:b9:aa:c9:1b:62:44:ba:85:a3:
ac:e8:bb:81:31:d2:3e:a6:d6:41:84:82:ad:18:b0:
4c:a5:78:7e:31:91:67:eb:fa:11:9c:ce:46:55:51:
ab:be:34:21:e6:46:4a:79:9f:9b:00:60:c2:32:c1:
ca:4d:85:4d:26:50:47:63:0a:ed:6f:1a:79:24:78:
78:3b:f6:19:4f:61:6c:00:59:d9:5b:f7:5f:5e:0f:
70:80:68:35:2f:91:c2:1b:00:cd:a5:e3:e8:15:19:
89:34:57:70:f0:bd:47:aa:0c:44:16:a0:d0:47:d0:
e9:7d:6c:fa:0b:16:f0:2d:63:a1:12:36:0a:c5:91:
c2:e1:56:69:bf:55:64:c8:10:2b:e8:df:6a:e9:17:
f6:55:de:48:b7:7b:cd:9b:1d:69:cf:2c:80:60:d0:
a9:a5:fd:f9:19:cb:c6:82:c9:c7:a9:90:ec:c1:cd:
85:de:52:1a:c8:6b:c5:9a:f9:3e:19:94:51:6d:70:
ff:7a:b1:23:b4:cf:3c:48:17:a0:7d:37:be:fe:62:
13:07:67:dc:58:00:2f:20:12:c7:2d:26:2a:c6:06:
d3:00:b2:dc:be:24:f9:5a:64:3c:a3:40:33:3b:b4:
04:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C0:EA:51:33:5A:2D:0F:70:55:D6:A0:2D:63:EE:6B:60:2C:4A:28
X509v3 Authority Key Identifier:
keyid:87:4B:59:1B:5D:8F:07:6E:AF:47:2E:3E:A4:5D:3B:5C:8E:13:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:40:ee:91:af:d8:82:4f:1c:bf:4b:15:8b:e1:0e:4c:42:bf:
bf:ea:f3:ec:83:32:d7:72:10:f7:32:fe:ef:88:c8:b1:25:6f:
90:d3:09:ce:03:3e:30:0b:79:9f:b3:ad:da:5e:b5:30:a7:99:
68:68:79:8f:8e:db:b3:5e:d9:b5:57:4d:fa:ed:24:1a:d3:02:
b0:37:27:44:d5:aa:27:37:91:c6:4a:43:c4:ca:87:33:54:3e:
0b:a8:f7:49:96:37:18:26:f4:38:f7:07:10:a5:93:d9:12:5c:
d5:17:16:ad:39:56:70:d7:44:a1:36:68:e9:66:1a:c2:1c:f5:
01:d5:ca:d0:98:ca:ac:ee:af:80:5d:bc:c4:99:3e:57:87:94:
4b:31:42:c2:42:d2:70:c0:18:09:35:4b:d1:8f:b5:17:d0:6e:
65:2c:43:85:b0:9d:50:c0:82:0a:65:00:72:c6:fd:13:f5:5e:
f4:e9:9b:db:f0:ff:fd:05:f0:00:65:18:93:d2:dd:0a:f6:32:
77:a4:f6:3a:a6:f5:ed:51:17:62:dc:1f:f6:0f:13:c1:af:18:
7c:f4:43:9e:83:e6:55:74:cd:17:46:95:44:ec:b0:2d:1a:9f:
08:93:63:4a:8c:56:4d:96:e7:21:8c:e2:a6:82:be:70:6f:41:
8b:4c:e8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 07:02:23 2026 by rpki-client